Appl. No. 10/687,217 
Amdt. dated May 24, 2007 

Reply to Office Action of February 28, 2007 

This listing of claims replaces all prior versions, 
and listings of claims in the instant application: 

Listing of Claims t 

1. (Currently Amended) A method for digital content 
access control, comprising: 

determining , on a user device, digital content 
to be made accessible via a rights locker describing 
a user's access rights for digital content associated 
with said rights locker; 

determining , on said user device, enrollment 
authentication data; 

sending , from said user device, a rights locker 
enrollment request to a rights locker provider, said 
rights locker enrollment request comprising a digital 
content request and said enrollment authentication 
data; and 

receiving , on said user device, an authenticated 
rights locker access request in response to said 
sending, said authenticated rights, locker access 
request for subsequent use in accessing digital 
content associated with said rights locker. 

2. (Original) The method of claim 1 wherein said 
digital content request comprises a request for 
initializing said rights locker with rights to specified 
digital content . 

3. (Original) The method of claim 1 wherein said 
enrollment authentication data comprises: 

rights locker access authentication data for 
determining what rights, if any, said user has to 
access said rights locker; and 

rights content access authentication data for 
determining what rights, if any, said user has to 
digital content associated with said rights locker. 
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4. (Original) The method of claim 3 wherein said 
rights locker access authentication data comprises payment 
for use of a rights locker service. 

5. (Original) The method of claim 3 wherein said 
rights content access authentication data comprises payment 
for rights deposited in said rights locker. 

6. (Original) The method of claim 1 wherein said 
enrollment authentication data comprises a reenrollment key 
determined in a previous enrollment request for said rights 
locker, said reenrollment key for supplementing or 
replacing enrollment authentication data of said previous 
enrollment request. 

7. (Original) The method of claim 1, further 
comprising storing at least part of said authenticated 
rights locker access request in a bookmark on said user 
device. 

8. (Original) The method of claim 1 wherein said 
authenticated rights locker access request is embedded in a 
Web cookie . 

9. (Currently Amended) The method of claim 1 wherein 
said authenticated rights locker access request is 
encapsulated in an Hypertext Transfer ProtocolH ^^ Response 
message . 

10. (Currently Amended) A method for digital content 
access control, comprising: 

determining , on a user device, a digital content 
specification and associated authenticated rights 
locker access request; 
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sending , from said user device, said 
authenticated rights locker access request and said 
digital content specification; 

receiving , on said user device, an authenticated 
digital content request and a new authenticated 
rights locker access request in response to said 
sending; 

sending , from said user device, said 
authenticated digital content request; and 

receiving , on said user device, said digital 
content in response to said sending said 
authenticated digital content request. 

11. (Original) The method of claim 10 wherein 
said method further comprises determining one or 

more delivery parameters, said one or more delivery 
parameters indicating where said digital content should 
be sent, a delivery mechanism, or both; and 

said sending further comprises sending said one or 
more delivery parameters.. 

12. (Original) The method of claim 10, further 
comprising storing at least part of said new authenticated 
rights locker access request in a bookmark on said user 
device . 

13. (Original) The method of claim 10 wherein said 
new authenticated rights locker access request is embedded 
in a Web cookie . 

14. (Currently Amended) The method of claim 10 
wherein said new authenticated rights locker access request 
is encapsulated in as Hypertext Transfer ProtocolH T^ 
Response message . 

15. (Currently Amended) A method for digital content 
access control, comprising: 
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determining , on a user device, a digital content 
specification and associated authenticated, rights 
locker access request; 

sending , from said user device, said 
authenticated rights locker access request and said 
digital content specification; 

receiving , on said user device, a new 
authenticated rights locker access request in 
response to said sending; and 

receiving , on said user device, said digital 
content in response to said sending. 

16. (Original) The method of claim 15 wherein 
said method further comprises determining one or 

more delivery parameters, said one or more delivery 
parameters indicating where said digital content should 
be sent, a delivery mechanism, or both; and 

said sending further comprises sending said one or 
more delivery parameters. 

17. (Original) The method of claim 15, further: 
comprising storing at least part of said new authenticated 
rights locker access request in a bookmark on said user 
device . 

18. (Original) The method of claim 15 wherein said 
new authenticated rights locker access request is embedded 
in a Web cookie . 

19. (Currently Amended) The method of claim 15 
wherein said new authenticated rights locker access request 
is encapsulated in an Hypertext Transfer ProtocolB ^^ 
Response message. 

20. (Currently Amended) A program storage device 
readable by a machine, embodying a program of instructions 
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executable by the machine to perform a method for digital 
content access control, the method comprising: 

determining , on a user device, digital content 
to be made accessible via a rights locker describing 
a user's access rights for digital content associated 
with said rights locker; 

determining , on said user device, enrollment 
authentication data; 

sending , from said user device, a rights locker 
enrollment request to a rights locker provider, said 
rights locker enrollment request comprising a digital 
content request and said enrollment authentication 
data; and 

receiving , on said user device, ' an authenticated 
rights locker access request in response to said 
sending, said authenticated rights locker access 
request for subsequent use in accessing digital 
content associated with said rights locker. 

21. (Original) The program storage device of claim 

2 0 wherein said digital content request comprises a request 
for initializing said rights locker with rights to 
specified digital content. 

22. (Original) The program storage device of claim 
20 wherein said enrollment authentication data comprises: 

rights locker access authentication data for 
determining what rights, if any, said user has to 
access said rights locker; and 

rights content access authentication data for 
determining what rights, if any, said user has to 
digital content associated with said rights locker. 

23. (Original) The program storage device of claim 
22 wherein said rights locker access authentication data 
comprises payment for use of a rights locker service. 



Page 13 of 41 



Appl. No. 10/687,217 
Amdt. dated May 24, 2007 

Reply to Office Action of February 28, 2 007 



24. (Original) The program storage device of claim 
22 wherein said rights content access authentication data 
comprises payment for rights deposited in said rights 
locker . 

25. (Original) The program storage device of claim 
20 wherein said enrollment authentication data comprises a 
reenrollment key determined in a previous enrollment 
request for said rights locker, said reenrollment key for 
supplementing or replacing enrollment authentication data 
of said previous enrollment request. 

26. (Original) The program storage device of claim 
20, said method further comprising storing at least part of 
said authenticated rights locker access request in a 
bookmark on said user device , 

27. (Original) The program storage device of claim 
2 0 wherein said authenticated rights locker access request 
is embedded in a Web cookie. 

28. (Currently Amended) The program storage device 
of claim 20 wherein said authenticated rights locker access 
request is encapsulated in aa Hypertext Transfer 
ProtocolHTTii Response message. 

29. (Currently Amended) A program storage device 
readable by a machine, embodying a program of instructions 
executable by the machine to perform a method for digital 
content access control, the method comprising: 



determining , on a user device, a digital content ^ 
specification and associated authenticated rights 
locker access request; 
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sending , from said user device, said 




authenticated rights locker access request and said 
digital content specification; 
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receiving , on said user device, an authenticated 
digital content request and a new authenticated 
rights locker access request in response to said 
sending 

sending , from said user device, said 
authenticated digital content request; and 

receiving , on said user device, said digital 
content in response to said sending said 
authenticated digital content request. 

30. (Original) The program storage device of claim 
2 9 wherein 

said method further comprises determining one or 
more delivery parameters, said one or more delivery- 
parameters indicating where said digital content 
should be sent, a delivery mechanism, or both; and 

said sending further comprises sending said one 
or more delivery parameters. 

31. (Original) The program storage device of claim 
29, said method further comprising storing at least part of 
said new authenticated rights locker access request in a 
bookmark on said user device . 

32. (Original) The program storage device of claim 
2 9 wherein said new authenticated rights locker access 
request is embedded in a Web cookie. 

33 . (Currently Amended) The program storage device 
of claim 2 9 wherein said new authenticated rights locker 
access request is encapsulated in aa Hypertext Transfer 
ProtocolH?^ Response message . 

34 . (Currently Amended) A program storage device 
readable by a machine, embodying a program of instructions 
executable by the machine to perform a method for digital 
content access control, the method comprising: 



Page 15 of 41 



Appl. No. 10/687,217 
Amdt. dated May 24, 20 07 

Reply to Office Action of February 28, 2007 

determining , on a user device, a digital content 
specification and associated authenticated rights 
locker access request; 

sending , from said user device, said 
authenticated rights locker access request and said 
digital content specification; 

receiving , on said user device, a new 
authenticated rights locker access request in 
response to said sending; and 

receiving , on said user device, said digital 
content in response to said sending . 

35. (Original) The program storage device of claim 
34 wherein 

said method further comprises determining one or 
more delivery parameters, said one or more delivery 
parameters indicating where said digital content 
should be sent, a delivery mechanism, or both; and 

said sending further comprises sending said one 
or more delivery parameters. 

36. (Original) The program storage device of claim 
34, said method further comprising storing at least part of 
said new authenticated rights locker access request in a 
bookmark on said user device. 

37. (Original) The program storage device of claim 
34 wherein said new authenticated rights locker access 
request is embedded in a Web cookie. 

38. (Currently Amended) The program storage device 
of claim 34 wherein said new authenticated rights locker 
access request is encapsulated in aR Hypertext Transfer 

GUNNISON. MCKAY A PTOtocolHTTP Response message . 
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F«?8jif.SS^88 39 . (Currently Amended) An apparatus user device for 

digital content access control, comprising: 
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means for determining , on said user device, 
digital content to be made accessible via a rights 
locker describing a user's access rights for digital 
content associated with said rights locker; 

means for determining , on said user device, 
enrollment authentication data; 

means for sending , from said user device, a 
rights locker enrollment request to a rights locker 
provider, said rights locker enrollment request 
comprising a digital content request and said 
enrollment authentication data; and 

means for receiving ^ on said user device, an 
authenticated rights locker access request in 
response to said sending, said authenticated rights 
locker access request for subsequent use in accessing 
digital -content associated with said rights locker. 

4 0 . (Currently Amended) The apparatu s user device of 
claim 3 9 wherein said digital content request comprises a 
request for initializing said rights locker with rights to 
specified digital content. 

41. (Currently Amended) The apparatu s user device of 
claim 39 wherein said enrollment authentication data 
comprises : 

rights locker access authentication data for 
determining what rights, if any, said user has to 
access said rights locker; and 

rights content access authentication data for 
determining what rights, if any, said user has to 
digital content associated with said rights locker. 



42 . (Currently Amended) The apparatus user device of 
claim 41 wherein said rights locker access authentication 
data comprises payment for use of a rights locker service. 
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4 3 . (Currently Amended) The apparatus user device of 
claim 41 wherein said rights content access authentication 
data comprises payment for rights deposited in said rights 
locker . 

44 . (Currently Amended) The apparatus user device of 
claim 3 9 wherein said enrollment authentication data 
comprises a reenrollment key determined in a previous 
enrollment request for said rights locker, said 
reenrollment key for supplementing or replacing enrollment 
authentication data of said previous enrollment request. 

45. (Currently Amended) The apparatus user device of 
claim 39, further comprising means for storing at least 
part of said authenticated rights locker access request in 
a bookmark on said user device . 

46. (Currently Amended) The apparatus user device of 
claim 3 9 wherein said authenticated rights locker access 
request is embedded in a Web cookie . 

47. (Currently Amended) The apparatup user device of 
claim 39 wherein said authenticated rights locker access 
request is encapsulated in an Hypertext Transfer 
Protocolt g^ Response message. 

48. (Currently Amended) Aa apparatup user device for 
digital content access control, comprising: 

means for determining , on said user device, a 
digital content specification and associated 
authenticated rights locker access recjuest; 

means for sending , from said user device, said 
authenticated rights locker access request and said 
digital content specification; 

means for receiving , on said user device, an 
authenticated digital content request and a new 
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authenticated rights locker access request in 
response to said sending; 

means for sending , from said user device, said 
authenticated digital content request; and 

means for receiving , on said user device, said 
digital content in response to said sending said 
authenticated digital content request. 

49. (Currently Amended) The apparatus user device of 
claim 48 wherein 

said apparatuo user device further comprises 
means for determining one or more delivery 
parameters, said one or more delivery parameters 
indicating where said digital content should be sent, 
a delivery mechanism, or both; and 

said means for sending further comprises means 
for sending said one or more delivery parameters. 

50. (Currently Amended) The apparatuo user device of 
claim 48, further comprising means for storing at least 
part of said new authenticated rights locker access re^quest 
in a bookmark on said user device . 

51. (Currently Amended) The apparatus user device of 
claim 48 wherein said new authenticated rights locker 
access request is embedded in a Web cookie. 

52 . (Currently Amended) The apparatus user device of 
claim 48 wherein said new authenticated rights locker 
access request is encapsulated in aa Hypertext Transfer 
Protocolt H^^ Response message . 

53 . (Currently Amended) Ah apparatuo user device for 
digital content access control, comprising: 

means for determining , on said user device, a 
digital content specification and associated 
authenticated rights locker access request; 
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means for sending , ' from said user device, said 
authenticated rights locker access request and said 
digital content specification; 

means for receiving , on said user device, a new 
authenticated rights locker access request in 
response to said sending; and 

means for receiving , on said user device, said 
digital content in response to said sending. 

54. (Currently Amended) The apparatus user device of 
claim 53 wherein 

said apparatuD user device further comprises 
means for determining one or more delivery- 
parameters, said one or more delivery parameters 
indicating where said digital content should be sent, 
a delivery mechanism, or both; and 

said means for sending further comprises means 
for sending said one or more delivery parameters. 

55. (Currently Amended) The apparatus user device of 
claim 53,. further comprising means for storing at least 
part of said new authenticated rights locker access request 
in a bookmark on said user device. 



56. (Currently Amended) The apparatu D user device of 
claim 53 wherein said new authenticated rights locker 
access request is embedded in a Web cookie. 

57, (Currently Amended) The apparatu s user device of 
claim 53 wherein said new authenticated rights locker- 
access request is encapsulated in as Hypertext Transfer 
ProtocolH T^ Response message . 



58. (Currently Amended) Aft apparatus user device 
for digital content access control, comprising: 

a memory for storing said digital content; and 
a processor configured to: 
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determine , on said user device, digital 
content to be made accessible via a rights locker 
describing a user's access rights for digital 
content associated with said rights locker; 

det ermine , on said user device, enrollment 
authentication data; 

send , from said user device, a rights locker 
enrollment request to a rights locker provider, 
said rights locker enrollment request comprising 
a digital content request and said enrollment 
authentication data; and 

receive , on said user device, an 
authenticated rights locker access request in 
response to said sending, said authenticated 
rights locker access request for subsequent use, 
in accessing digital content associated with said 
rights locker. 

59. (Currently Amended) The apparatuo user device of 
claim 58 wherein said digital content request comprises a 
request for initializing said rights locker with rights to 
specified digital content. 

60. (Currently Amended) The . apparatus user device of 
claim 58 wherein said enrollment authentication data 
comprises: 

rights locker access authentication data for 
determining what rights, if any, said user has to 
access said rights locker; and 

rights content access authentication data for 
determining what rights, if any, said user has to 
digital content associated with said rights locker. 

61. (Currently Amended) The apparatu s user device of 
claim 60 wherein said rights locker access authentication 
data comprises payment for use of a rights locker service. 
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62 . (Currently Amended) The apparatus user device of 
claim 60 wherein said rights content access authentication 
data comprises payment for rights deposited in said rights 
locker. 

63 . (Currently Amended) The apparatuc user device of 
claim 58 wherein said enrollment authentication data 
comprises a reenrollment key determined in a previous 
enrollment request for said rights locker, said 
reenrollment key for supplementing or replacing, enrollment 
authentication data of said previous enrollment request. 

64. (Currently Amended) The apparatus user device of 
claim 58 wherein said apparatus u ser device comprises a 
smart card. 

65. (Currently Amended) The apparatus user device of 
claim 64 wherein said smart card comprises a Java Card^" 
technology- enabled smart card. 

66. (Currently. Amended) * The apparatuc user device of 
claim 64 wherein said smart card comprises a CDMA (Code 
Division Multiple Access) technology-enabled smart card. 

67. (Currently Amended) The apparatus user device of 
claim 64 wherein said smart card comprises a SIM 
(Subscriber Identity Module) card. 

68. (Currently Amended) The apparatus user device of 
claim 64 wherein said smart card comprises a WIM (Wireless 
Interface Module) . 

69. (Currently Amended) The apparatus user device of 
claim 64 wherein said smart card comprises a USIM 
(Universal Subscriber Identity Module) . 
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70. (Currently Amended) The apparatus user device of 
claim 64 wherein said smart card comprises a UIM (User 
Identity Module) . 

71. (Currently Amended) The apparatus user device of 
claim 64 wherein said smart card comprises a R-UIM 
(Removable User Identity Module) . 

72. (Currently Amended) The apparatus user device of 
claim 58 wherein said processor is further configured to 
store at least part of said authenticated rights locker 
access request in a bookmark on said user device. 

73 . (Currently Amended) The apparatus user device of 
claim 58 wherein said authenticated rights locker access 
request is embedded in a Web cookie . 

7'4 . (Currently Amended) The apparatus user device of 
claim 58 wherein said authenticated rights locker access 
request is encapsulated in an Hypertext Transfer 
ProtocolH?iTP Response message ; 

75. (Currently Amended) An apparatus user device for 
digital content access control, comprising: 

a memory for storing said digital content; and 
a processor configured to: 

determine , on said user device, a digital 
content specification and associated 
authenticated rights locker access request; 

send , from said user device, said 
authenticated rights locker access request and 
said digital content specification; 

receive ^ on said user device, an 
authenticated digital content request and a new 
authenticated rights locker access request in 
response to said sending; 
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send , from said user device, said 
authenticated digital content request; and 

receive , on said user device, said digital 
content in response to said sending said 
authenticated digital content request. 



76. (Currently Amended) The apparatus user device of 
claim 75 wherein 

said processor is further configured to determine 
one or more delivery parameters, said one or more 
delivery parameters indicating where said digital 
content should be sent, a delivery mechanism, or both; 
and 

said sending further comprises sending said one or 
more delivery parameters. 

77. (Currently Amended) The apparatus user device of 
claim 75 wherein said apparatus user device comprises a 
smart card. 



78. (Currently Amended) The apparatus user device of 
claim 77 wherein said smart card comprises a Java Card™ 
technology-enabled smart card. 

79. (Currently Amended) The apparatus user device of 
claim 77 wherein said smart card comprises a CDMA (Code 
Division Multiple Access) technology- enabled smart card. 

80. (Currently Amended) The apparatus user device of 
claim 77 wherein said smart card comprises a SIM 
(Subscriber Identity Module) card. 



81. (Currently Amended) The apparatus user device of. 
claim 77 wherein said smart card comprises a WIM (Wireless 
Interface Module) . 
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82 . 



(Currently Amended) The 




mser device of 



claim 77 wherein said smart card comprises a USIM 
(Universal Subscriber Identity Module) . 

83 . (Currently Amended) The apparatus user device of 
claim 7 7 wherein said smart card comprises a UIM (User 
Identity Module) . 

84. (Currently Amended) The apparatuo user device of 
claim 77 wherein said smart card comprises a R-UIM 
(Removable User Identity Module) . 

85. (Currently Amended) The apparatus user device of 
claim 75 wherein said processor is further configured to 
store at least part of said new authenticated rights locker 
access request in a bookmark on said user device, 

86. (Currently Amended) The apparatus user device of 
claim 75 wherein said new authenticated rights locker 
access request is embedded in a Web cookie. 

87. (Currently Amended) The apparatu s user device of 
claim 75 wherein said new authenticated rights locker 
access request is encapsulated in asi Hypertext Transfer 
ProtocolHTTP Response message . 

88. (Currently Amended) Ar apparatus user device for 
digital content access control, comprising: 



a memory for storing said digital content; and 

a processor configured to: 

determine ^ on said user device, a digital 
content specification and associated 
authenticated rights locker access request; 
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sen d, from said user device, said 
authenticated rights locker access request and 
said digital content specification; 
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receive , on said user device, a new 
authenticated rights locker access request in 
response to said sending; and 

receive , on said user device said digital 
content in response to said sending. 

89. (Currently Amended) The apparatus user device of 
claim 88 wherein 

said processor is further configured to determine 
one or more delivery parameters, said one or more 
delivery parameters indicating where said digital 
content should be sent, a delivery mechanism, or both; 
and 

said sending further comprises sending said one or 
more delivery parameters. 

90. (Currently Amended) The apparatus user device of 
claim 88 wherein said apparatus user device comprises a 
smart card . 

91. (Currently Amended) The apparatus user device of 
claim 90 wherein said smart card comprises a Java Card™ 
technology-enabled smart card. 

92 . (Currently Amended) The apparatus user device of 
claim 90 wherein said smart card comprises a CDMA (Code 
Division Multiple Access) technology- enabled smart card. 

93 . (Currently Amended) The apparatus user device of 
claim 90 wherein said smart card comprises a SIM 
(Subscriber Identity Module) card. 

94 . (Currently Amended) The apparatus user device of 
claim 90 wherein said smart card comprises a WIM (Wireless 
Interface Module) . 




Montacy. CA 93940 
Fax(S3t)6S5-OS88 



Page 2 6 of 41 



Appl. No. 10/687,217 
Amdt. dated May 24, 2007 

Reply to Office Action of February 28, 2007 



95. (Currently Amended) The apparatuc user device of 

claim 90 wherein said smart card comprises a USIM 
(Universal Subscriber Identity Module) . 

96. (Currently Amended) The apparatus user device of 
claim 90 wherein said smart card comprises a UIM (User 
Identity Module) . 

97 . (Currently Amended) The apparatuc user device of 
claim 90 wherein said smart card comprises a R-UIM 
(Removable User Identity Module) . " 

98. (Currently Amended) The apparatus user device of 
claim 88 wherein said processor is further configured to 
store at least part of said new authenticated rights locker 
access request in a bookmark on said user device. 

99. (Currently Amended) The apparatuc user device of 
claim 88 wherein said new authenticated rights locker 
access request is embedded in a Web cookie. 

100. (Currently Amended) The apparatus user device of 
claim 88 wherein said new authenticated rights locker 
access request is encapsulated in an Hypertext Transfer 
ProtocolJKPHP Response message. 
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